ShepherdLog Privacy Policy

Effective July 6, 2026

The short version: ShepherdLog has no servers, no user accounts, and no tracking. Everything you record in the app stays on your device. We never see your data — and we built it that way on purpose, because pastoral care notes are confidential.

Who we are

ShepherdLog is a private pastoral care tracker for iPhone, made for solo pastors and church planters. It is developed and maintained by an independent developer. If you have any questions about this policy, email wbagnew21@gmail.com.

What the app stores — and where

Everything you enter in ShepherdLog is stored in a local database on your device only:

People's names, relationship tags, phone numbers, addresses, and photos
Care log entries (visits, calls, texts, prayer requests) and their notes
Follow-up reminders and milestones (birthdays, anniversaries, and similar dates)

None of this is transmitted to us or to any third party. ShepherdLog does not use iCloud sync, analytics, advertising, or crash-reporting services. Deleting the app deletes all of this data.

Face ID and passcode lock

You can optionally require Face ID or your device passcode to open ShepherdLog. Authentication is handled entirely by Apple's system frameworks on your device. ShepherdLog never sees or stores your biometric information — the app only receives a yes/no answer from iOS.

Notifications

Follow-up and milestone reminders use local notifications scheduled on your device. No notification content ever leaves your phone.

Planning Center sync (optional)

If you choose to connect your own Planning Center account, you provide a Personal Access Token (an Application ID and Secret) that you generate in your Planning Center developer settings.

Your credentials are stored only in your device's Keychain, Apple's encrypted credential store.
They are sent only to api.planningcenteronline.com to fetch your people list — never to us or anyone else.
Synced names and contact info are stored on your device like everything else.
Disconnecting Planning Center in Settings removes the credentials from your device.

Your use of Planning Center is governed by Planning Center's own privacy policy.

Purchases

ShepherdLog offers a single one-time unlock purchase, processed entirely by Apple through the App Store. We do not receive your name, payment details, or any personal information from the transaction. Refer to Apple's privacy policy for how Apple handles purchase data.

PDF export

You can export a person's care history as a PDF. That file is created on your device and shared only where you choose to send it (AirDrop, Files, email, etc.). Be thoughtful — exported PDFs contain the same confidential notes the app protects.

Children's privacy

ShepherdLog is intended for use by adults in ministry roles and does not knowingly collect any information from children — or, for that matter, from anyone, since it collects nothing.

Changes to this policy

If the app's privacy practices ever change, this page will be updated and the effective date revised. Because the app is designed to be fully on-device, we expect changes to be rare.

Contact

Questions or concerns? Email wbagnew21@gmail.com.